Static task
static1
Behavioral task
behavioral1
Sample
8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0.exe
Resource
win10v2004-20231020-en
General
-
Target
8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0.exe.zip
-
Size
1.7MB
-
MD5
8efbef2492f91616fcd52b71c7bbf052
-
SHA1
1857355b5ae427e72482be3b467a1d40d19de35a
-
SHA256
3d3c8c85a9f49b070e42599575c811c13518ed55fa5d7b8240a9793a862f5de0
-
SHA512
8b7260822548ee7d60b6cd00f4cbdc15c5d7b7a84bbb3e21b968f816026eac8b144a4cbf57cb6355b3e772382c91ff118ae357a062e53332f417b676feb76fd7
-
SSDEEP
49152:lmApbXIZtnYSIvF+TSrRXovBJcuoFKlB/pn6C75LPFhkE:fpbI8v0gejTSqn1FP4E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0.exe
Files
-
8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0.exe.zip.zip
Password: infected
-
8cdbc576f1b4e4ec94fb92f5532b9a74171a6c3a6664ed175938ca1bdf97b8b0.exe.exe windows:5 windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.drectve Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ